Given the build date of the kernel on my phone and the publicly disclosed security bugs in the kernel fixed in later releases, I'd be amazed if any Android version (yes, including current ones!) is free of known security holes.